Q&A: What Can I Do If a New Firewall Device Cannot Be Telneted?

If the new firewall fails to be telnet, perform the following operations to rectify the fault.

Procedure

For access through the management interface (GE0/0/0) on a non-high-end firewall (USG9500), check the following items:

Step 1      Whether the login interface is added to a security zone.

Step 2      Whether the interface has the Telnet service enabled (service-manage telnet permit).

Step 3      Whether the Telnet server function is enabled on the device (telnet server enable).

Step 4      Whether Telnet packets are blocked after matching security policies.

Step 5      Whether the Telnet service on the client is enabled (service-type telnet).

Step 6      Whether user-interface VTY is enabled (protocol inbound telnet/all).

For access through the management interface (GE0/0/0) on a high-end firewall (USG9500), check the following items:

Step 1      Whether the Telnet server function is enabled on the device (telnet server enable).

Step 2      Whether the Telnet service on the client is enabled (service-type telnet).

Step 3      Whether the Telnet service on the client is enabled (service-type telnet).

For details, see the USG6000E Firewall Product Documentation.